diff options
| author | Remko Lodder <remko@FreeBSD.org> | 2007-05-23 16:29:27 +0000 |
|---|---|---|
| committer | Remko Lodder <remko@FreeBSD.org> | 2007-05-23 16:29:27 +0000 |
| commit | 8003ff970609c99bcdb27cb9cd882ca821b6bfab (patch) | |
| tree | 06749e3cef4488d556e3e5925ad259f7c652eebf /security/vuxml | |
| parent | 6fd3e0d617fba44e3511358f05a39cb489161603 (diff) | |
Notes
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 40 |
1 files changed, 40 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 286980a686ca..32c308c46c8f 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,46 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="8e01ab5b-0949-11dc-8163-000e0c2e438a"> + <topic>FreeBSD -- heap overflow in file(1)</topic> + <affects> + <system> + <name>FreeBSD</name> + <range><gt>6.2</gt><lt>6.2_5</lt></range> + <range><gt>6.1</gt><lt>6.1_17</lt></range> + <range><gt>5.5</gt><lt>5.5_13</lt></range> + </system> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <h1>Problem Description:</h1> + <p>When writing data into a buffer in the file_printf function, + the length of the unused portion of the buffer is not + correctly tracked, resulting in a buffer overflow when + processing certain files.</p> + <h1>Impact:</h1> + <p>An attacker who can cause file(1) to be run on a maliciously + constructed input can cause file(1) to crash. It may be + possible for such an attacker to execute arbitrary code with + the privileges of the user running file(1).</p> + <p>The above also applies to any other applications using the + libmagic(3) library.</p> + <h1>Workaround:</h1> + <p>No workaround is available, but systems where file(1) and + other libmagic(3)-using applications are never run on + untrusted input are not vulnerable.</p> + </body> + </description> + <references> + <cvename>CVE-2007-1536</cvename> + <freebsdsa>FreeBSD-SA-07:04.file</freebsdsa> + </references> + <dates> + <discovery>2007-05-23</discovery> + <entry>2007-05-23</entry> + </dates> + </vuln> + <vuln vid="0e575ed3-0764-11dc-a80b-0016179b2dd5"> <topic>squirrelmail -- Cross site scripting in HTML filter</topic> <affects> |